Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6d663d80-8312-3fc2-b20d-e44280150a9f.roa
File:                     6d663d80-8312-3fc2-b20d-e44280150a9f.roa (raw, json)
Hash identifier:          SfYR/pIdvYioRGgHELcCL8p9I9z84RFWoMmY1mbgaic=
Subject key identifier:   9E:2D:40:0A:97:BB:33:8F:CE:C2:01:24:AF:C1:7B:C0:C6:84:DC:24
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493136D4B7E2C886CB8DA3F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6d663d80-8312-3fc2-b20d-e44280150a9f.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     7122
IP address blocks:        64.4.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:6d:4b:7e:2c:88:6c:b8:da:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=c2a169db-32ca-4713-aeed-ad7600d49a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:bf:ba:88:6c:de:1c:05:06:c5:a7:e0:c3:
                    13:46:0d:1a:22:d9:a9:35:ea:2e:f4:bf:19:65:f2:
                    66:25:ae:08:20:5f:0a:1c:91:ec:7c:5a:a7:53:16:
                    71:e9:2d:c8:47:e7:7f:a4:87:53:f2:34:c9:01:81:
                    22:84:cb:de:03:dd:1f:f2:31:18:22:07:ac:db:3f:
                    c8:b1:39:1d:1d:eb:09:ed:1a:67:4c:5e:63:18:15:
                    22:54:dd:d6:3f:b6:05:c1:99:86:3d:d7:0e:0e:f4:
                    15:58:63:b2:0e:f3:1f:dd:1c:9d:ad:20:47:9e:25:
                    3c:d5:33:b4:11:9c:bc:8c:53:9e:76:74:dc:b1:00:
                    a7:42:f2:66:40:dc:f3:53:e0:dc:c6:2f:8d:35:61:
                    7c:43:ff:d0:db:23:30:54:05:18:9c:c4:30:bd:73:
                    69:07:15:2a:d4:05:a2:46:0d:80:aa:8d:23:0f:b8:
                    a2:da:ba:b3:03:cc:1e:4d:98:3f:70:18:37:eb:bf:
                    06:39:59:2f:1f:20:6a:6b:00:a8:91:77:fa:36:fa:
                    79:e2:bf:0f:65:b4:f0:7b:92:94:34:bc:b9:b4:c4:
                    16:a8:80:61:98:73:5f:b5:c9:ac:7e:5c:34:cb:7e:
                    de:d9:c0:1c:1f:92:5a:0c:f0:ad:58:ae:bf:96:1f:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2D:40:0A:97:BB:33:8F:CE:C2:01:24:AF:C1:7B:C0:C6:84:DC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6d663d80-8312-3fc2-b20d-e44280150a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:59:8a:e3:d7:bf:db:d1:15:d0:6b:12:d8:b9:fa:6a:dd:
         fe:03:95:3f:bb:a4:ab:00:d6:c2:8f:da:ff:65:3a:5b:a4:26:
         dd:f8:e3:23:dd:cd:07:6a:a4:15:a2:ee:70:d8:66:fc:e1:6c:
         9a:b4:9c:30:b5:1a:66:21:1e:5d:88:32:1c:02:4e:be:51:f5:
         cc:7e:c2:97:47:d3:18:c0:76:c0:64:d5:a6:13:ad:a4:08:ed:
         80:6c:f1:73:4f:2a:6f:cf:56:b1:83:9f:65:de:7e:0d:f5:0b:
         29:fa:10:31:64:b5:32:d7:1e:ce:29:35:3f:fd:13:25:97:8e:
         46:84:7f:6d:f5:69:69:30:16:50:08:15:8a:6d:81:c5:b8:80:
         83:43:83:34:b5:e7:9a:f9:47:3c:ed:6e:b7:2a:8d:b6:2c:3c:
         1a:d4:09:59:a8:4d:e1:8b:2f:3f:59:98:d5:49:93:26:b5:94:
         3e:c2:2e:35:ed:97:89:fb:ae:ae:d6:42:a0:ba:45:40:9c:25:
         3a:6d:50:24:55:3b:7a:51:cf:33:4b:dd:19:ec:70:8e:31:a2:
         24:2c:19:be:f4:12:a5:1b:32:2e:69:e4:66:d4:34:e8:87:4c:
         ba:97:01:c1:06:1e:ed:ae:28:ff:b9:16:39:6f:e5:5a:31:91:
         1d:d2:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----